BIND

this document provides information about configuring the {{k3}} with bind by using {{futurex}} pkcs #11 libraries for additional questions related to your {{k3}} see the relevant user guide about bind bind is a software suite for interacting with the {{dns}} its most prominent component, {{named}} , performs both primary dns server roles, acting as an authoritative name server for dns zones and as a recursive resolver within the network as of 2015, it is the most widely used domain name server software and is the de facto standard on unix like operating systems also contained in the suite are various administrative tools, such as nsupdate and dig , as well as a dns resolver interface library how the bind integration works the integration involves the following steps zone data creation/update user defines / updates dns zone file key reference request bind identifies required signing keys hsm login bind authenticates to {{k3}} via pkcs#11 signing key access {{k3}} locates requested signing keys hsm signing operation {{k3}} generates digital signatures using private keys zone file update signed dns records are added to zone data zone publication bind loads and serves signed zone data resolver validation dns resolvers verify signatures using dnssec public keys pkcs #11 in bind the pkcs #11 support in bind comes in two forms native pkcs #11 bind interfaces directly with the {{vectera}} provided library through the pkcs #11 api this allows bind to interact directly with the pkcs #11 provider for public key cryptography (dnssec) openssl based pkcs #11 bind uses an openssl pkcs #11 provider (such as pkcs11 provider from the latchset project) to interact with {{vectera}} indirectly this integration guide uses the openssl based pkcs #11 method because it is the only method compatible with futurex's {{k3}}